‘Transparent Tribe’, a suspected Pakistan-linked hacker known for targeting military and diplomatic personnel in both India and Pakistan, is using malicious Android apps mimicking YouTube to spread the CapraRAT mobile remote access trojan (RAT), a new report has shown.
Upon installation, the apps request intrusive permissions that allow the malware to harvest and exfiltrate sensitive information to a hacker-controlled server with notable features.